← All changes | back/Helpers/SecurityHelper.php +150 -29 11.0.0 → 11.1.0 View file →

		@@ -7,44 +7,43 @@
7	7	class SecurityHelper extends AcymObject
8	8	{
9	9	const ALLOWED_HTML_DATE = [
10	10	'div' => [
11		- 'class' => [],
12		- 'style' => [],
13		- 'id' => [],
14		- 'data-reveal' => [],
15		- 'data-reveal-larger' => [],
	11	+ 'class' => true,
	12	+ 'style' => true,
	13	+ 'id' => true,
	14	+ 'data-reveal' => true,
	15	+ 'data-reveal-larger' => true,
16	16	],
17	17	'input' => [
18		- 'type' => [],
19		- 'name' => [],
20		- 'id' => [],
21		- 'value' => [],
22		- 'class' => [],
23		- 'data-open' => [],
24		- 'readonly' => [],
25		- 'data-acym-translate' => [],
26		- 'data-rs' => [],
27		- 'onchange' => [],
28		- 'data-reveal' => [],
29		- 'data-reveal-larger' => [],
	18	+ 'type' => true,
	19	+ 'name' => true,
	20	+ 'id' => true,
	21	+ 'value' => true,
	22	+ 'class' => true,
	23	+ 'data-open' => true,
	24	+ 'readonly' => true,
	25	+ 'data-rs' => true,
	26	+ 'onchange' => true,
	27	+ 'data-reveal' => true,
	28	+ 'data-reveal-larger' => true,
30	29	],
31		- 'span' => ['class' => [], 'aria-hidden' => []],
	30	+ 'span' => ['class' => true, 'aria-hidden' => true],
32	31	'button' => [
33		- 'type' => [],
34		- 'class' => [],
35		- 'data-close' => [],
36		- 'data-type' => [],
37		- 'aria-label' => [],
38		- 'data-open' => [],
	32	+ 'type' => true,
	33	+ 'class' => true,
	34	+ 'data-close' => true,
	35	+ 'data-type' => true,
	36	+ 'aria-label' => true,
	37	+ 'data-open' => true,
39	38	],
40	39	'select' => [
41		- 'id' => [],
42		- 'name' => [],
43		- 'class' => [],
	40	+ 'id' => true,
	41	+ 'name' => true,
	42	+ 'class' => true,
44	43	],
45		- 'optgroup' => ['label' => []],
46		- 'option' => ['value' => [], 'selected' => [], 'disabled' => []],
	44	+ 'optgroup' => ['label' => true],
	45	+ 'option' => ['value' => true, 'selected' => true, 'disabled' => true],
47	46	];
48	47
49	48	const ALLOWED_HTML_SELECT = [
50	49	'select' => [
		@@ -64,8 +63,10 @@
64	63	'href' => true,
65	64	'target' => true,
66	65	'title' => true,
67	66	'class' => true,
	67	+ 'rel' => true,
	68	+ 'aria-label' => true,
68	69	'data-acym-modal' => true,
69	70	],
70	71	'div' => [
71	72	'class' => true,
		@@ -76,7 +77,127 @@
76	77	],
77	78	'iframe' => [
78	79	'class' => true,
79	80	'src' => true,
	81	+ ],
	82	+ ];
	83	+
	84	+ const ALLOWED_HTML_FIELD_NAME = [
	85	+ 'b' => [],
	86	+ 'br' => [],
	87	+ 'strong' => [],
	88	+ 'em' => [],
	89	+ 'i' => [],
	90	+ 'span' => [
	91	+ 'class' => true,
	92	+ ],
	93	+ ];
	94	+
	95	+ const ALLOWED_HTML_INTRO = [
	96	+ 'i' => [
	97	+ 'class' => true,
	98	+ ],
	99	+ 'b' => [
	100	+ 'class' => true,
	101	+ ],
	102	+ 'p' => [
	103	+ 'class' => true,
	104	+ ],
	105	+ 'strong' => [
	106	+ 'class' => true,
	107	+ ],
	108	+ 'span' => [
	109	+ 'class' => true,
	110	+ ],
	111	+ ];
	112	+
	113	+ const ALLOWED_HTML_NOTIFICATION = [
	114	+ 'a' => [
	115	+ 'href' => true,
	116	+ 'target' => true,
	117	+ 'id' => true,
	118	+ 'class' => true,
	119	+ 'title' => true,
	120	+ ],
	121	+ 'b' => [],
	122	+ 'br' => [],
	123	+ 'i' => [],
	124	+ 'p' => [
	125	+ 'class' => true,
	126	+ 'title' => true,
	127	+ ],
	128	+ 'pre' => [],
	129	+ 'strong' => [],
	130	+ ];
	131	+
	132	+ const ALLOWED_HTML_MESSAGE = [
	133	+ 'a' => [
	134	+ 'href' => true,
	135	+ 'target' => true,
	136	+ 'id' => true,
	137	+ 'class' => true,
	138	+ 'title' => true,
	139	+ ],
	140	+ 'b' => [],
	141	+ 'br' => [],
	142	+ 'div' => [
	143	+ 'class' => true,
	144	+ ],
	145	+ 'i' => [],
	146	+ 'li' => [],
	147	+ 'p' => [
	148	+ 'class' => true,
	149	+ 'title' => true,
	150	+ ],
	151	+ 'pre' => [],
	152	+ 'span' => [
	153	+ 'class' => true,
	154	+ 'data-acym-email-id' => true,
	155	+ ],
	156	+ 'strong' => [],
	157	+ 'ul' => [],
	158	+ ];
	159	+
	160	+ const ALLOWED_HTML_CHECKBOX_LABEL = [
	161	+ 'div' => [
	162	+ 'class' => true,
	163	+ ],
	164	+ 'span' => [
	165	+ 'class' => true,
	166	+ ],
	167	+ 'input' => [
	168	+ 'class' => true,
	169	+ 'type' => true,
	170	+ 'name' => true,
	171	+ 'value' => true,
	172	+ ],
	173	+ 'select' => [
	174	+ 'class' => true,
	175	+ 'name' => true,
	176	+ 'id' => true,
	177	+ ],
	178	+ 'option' => [
	179	+ 'value' => true,
	180	+ 'selected' => true,
	181	+ 'disabled' => true,
	182	+ ],
	183	+ ];
	184	+
	185	+ const ALLOWED_HTML_PARAM_FIELD = [
	186	+ 'input' => [
	187	+ 'type' => true,
	188	+ 'name' => true,
	189	+ 'value' => true,
	190	+ ],
	191	+ 'select' => [
	192	+ 'class' => true,
	193	+ 'id' => true,
	194	+ 'name' => true,
	195	+ 'multiple' => true,
	196	+ ],
	197	+ 'option' => [
	198	+ 'value' => true,
	199	+ 'selected' => true,
	200	+ 'disabled' => true,
80	201	],
81	202	];
82	203	}